PrepAway - Latest Free Exam Questions & Answers

Category: 70-417 (v.1)

Exam 70-417: Upgrading Your Skills to MCSA Windows Server 2012 (April 29, 2013)

How should you configure the failover cluster?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
You are planning to deploy a custom Sales application named SalesApp. All users in the Sales
department will use SalesApp.
You have installed two Windows Server 2012 servers named ABC-CL1 and ABC-CL2. The two
servers will run the Failover Clustering feature and be configured as nodes in a single failover
cluster.
You plan to install SalesApp onto the failover cluster.
You need to configure the failover cluster so that ABC-CL1 responds to client requests for the
SalesApp application. ABC-CL2 must respond to client requests for the SalesApp application only
if ABC-CL1 is offline.
How should you configure the failover cluster?

you need to automate the deletion of performance log data that is more than one week old

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
A server named ABC-Win12Admin runs Windows Server 2012. You use ABC-Win12Admin to
administer the Windows Server 2012 servers in the domain.
You configure several custom Data Collector Sets on ABC-Win12Admin to collect performance log
data from network servers.
To preserve disk space on ABC-Win12Admin, you need to automate the deletion of performance
log data that is more than one week old.
What should you do?

Which three of the following steps should you perform to move the Active Directory Database to the new volume?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com.
A server named ABC-DC1 runs Windows Server 2012. ABC-DC1 has the Active Directory
Domain Services role installed and is configured as a domain controller in the ABC.com domain.
You need to move the Active Directory database to a new volume on ABC-DC1. Your solution
must minimize server downtime. You configure a new volume on the server.
Which three of the following steps should you perform to move the Active Directory Database to
the new volume? (Choose three).

How can you automate the promotion of the server using the settings in the ABC-RODC1.txt file?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
You plan to create a Windows Server 2012 Read Only Domain Controller in the ABC.com domain.
You open Active Directory Users and Computers and select the Pre-create a read-only domain
controller account option. You go through the Welcome to the Active Directory Domain Services
Installation Wizard and specify the settings to create an account named ABC-RODC1. You use
the Export Settings option to export the settings to a file named ABC-RODC1.txt. You plan to use
this text file to automate the installation of the Read Only Domain Controller.

You install a Window Server 2012 Server.
How can you automate the promotion of the server using the settings in the ABC-RODC1.txt file?

How can you view the settings in the PSO?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
The domain is configured to use different password policies.
You want to view the settings in a PSO (Password Settings Object).
How can you view the settings in the PSO?

Which two of the following steps should you perform first?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
Virtual machines (VMs) are hosted on Windows Server 2012 servers running the Hyper-V role.
One VM is named ABC-DC3. ABC-DC3 runs the Active Directory Domain Services role and is
configured as a domain controller for the ABC.com domain.
You want to clone ABC-DC3 to create another domain controller.
Which two of the following steps should you perform first? (Choose two).

How can you recreate the Default Domain Controllers Policy without affecting the Default Domain Policy?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
You create a second domain named Dev.ABC.com. The new domain contains a domain
controller named ABC-DevDC1. The Dev.ABC.com domain will be used to test domain
configurations before applying them to the corporate domain.
You discover that the Default Domain Controllers Policy on ABC-DevDC1 has become corrupted.
You do not have a backup of the Default Domain Controllers Policy.
How can you recreate the Default Domain Controllers Policy without affecting the Default Domain
Policy?

How can you ensure that you are able to complete the Configure NAP wizard to configure VPN Enforcement?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
You plan to enable external users to connect to the network using a VPN connection.
You are deploying Network Access Protection to ensure system health compliance for users that
connect over a VPN connection.
You install a Windows Server 2012 computer named ABC-NAP1 and install the Network Policy
Server role. You want to configure ABC-NAP1 as a Network Access Protection (NAP) health
policy server for the VPN connections.
You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable
to complete the wizard.
How can you ensure that you are able to complete the Configure NAP wizard to configure VPN
Enforcement?

How can you enable all Sales users to access the network using DirectAccess?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
Several Sales users spend most of their time away from the office.
You implement DirectAccess to enable the Sales users to connect to the network when they are
away from the office. All computers used by the Sales users are joined to the domain.
You create a DirectAccess client group named SalesDirectAccess and add all the computer
accounts for the Sales users computers to the SalesDirectAccess group.
Some Sales users report that they are unable to access the network using DirectAccess. Other
Sales report that they can connect successfully.
You discover that only users using laptop computers can connect using DirectAccess. Sales
users are unable to connect when they use desktop computers.
How can you enable all Sales users to access the network using DirectAccess?

How can you ensure that external users cannot connect to www.ABC.com using a DirectAccess connection?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
The corporate Web site www.ABC.com is hosted on a Windows Server 2012 Web Server hosted
on the corporate network. A public IP address is mapped to the private IP address of the Web
Server to provide Internet access to the corporate Web site.
DirectAccess is enabled on the network using the default configuration to enable external users to
access resources on the corporate network when they are away from the office.
Company security policy states that all connections from outside the office to www.ABC.com must
come through the corporate firewall using the external IP address of the Web site.
How can you ensure that external users cannot connect to www.ABC.com using a DirectAccess
connection?


Page 4 of 512345